CN102970072A - Method for judging device authentication state - Google Patents
Method for judging device authentication state Download PDFInfo
- Publication number
- CN102970072A CN102970072A CN2012105685769A CN201210568576A CN102970072A CN 102970072 A CN102970072 A CN 102970072A CN 2012105685769 A CN2012105685769 A CN 2012105685769A CN 201210568576 A CN201210568576 A CN 201210568576A CN 102970072 A CN102970072 A CN 102970072A
- Authority
- CN
- China
- Prior art keywords
- oam
- device authentication
- judgment device
- authentification failure
- authentication state
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Images
Abstract
The invention relates to the technical field of optical communication, in particular to a method for judging a device authentication state. Through analyzing Opcode, Branch and Leaf information in an expanding OAM (Operation Administration and Maintenance) message, types of device authentication failures are judged, reasons of authentication failures are found out according to the types of different authentication failures, and further multiple logon modes are used as the authentication failure judging bases, so that a communication abnormal position of a network device adopting multiple logon modes is rapidly fixed and PON (Passive Optical Network) device failures are immediately maintained.
Description
Technical field
The present invention relates to the optical communication technique field, relate in particular to a kind of method of judgment device authentication state.
Background technology
Along with the propelling of domestic informatization, the user is increasing for bandwidth demand, and each operator also begins the own access layer network that provides is carried out adaptability reform, and the direction of transforming is exactly optical-fiber network.
Early stage light access (Passive Optical Network, abbreviation PON) mostly adopts Fiber-To-The-Building (Fiber To The Building, abbreviation FTTB) mode, and in the mode of this light access greatly mainly with multi-user unit (Multi Dwelling Unit, be called for short MDU) for optical-fiber network terminates, and then push data into each subscriber household with network switch too.
Fig. 1 is the structural representation that the FTTB mode is carried out PON in the prior art; As shown in Figure 1, SNI (Service Node Interface, be called for short SNI) and optical line terminal (Optical Line Terminal, be called for short OLT), OLT is connected with Optical Distribution Network (ODU) by the PON interface, ODU by the PON interface respectively with a plurality of optical nodes (Optical Network Unit, be called for short ONU)/optical network device (Optical Network Terminal, be called for short ONT) connect, the user is again by user network side interface (User Node Interface, be called for short UNI) respectively with corresponding ONU/ONT as (ONU/ONT 1, ONU/ONT 2 or ONU/ONT n etc.) connect, and then realize optical fiber communication.
At present, along with increasing of number of users, and the spread of optical-fiber network, the light access way develops into Fiber to the home (Fiber To The Home from FTTB gradually, be called for short FTTH) be main intervening mode, released accordingly the home gateway unit (Home Gateway Unit) that merges single business user unit (Single Business Unit is called for short SBU) and home gateway functionalities.So the quantity of optical network device has begun explosion type ground and has increased.
No matter be with single business user unit (Single Business Unit, abbreviation SFU), multi-user unit (Multi Dwelling Unit) or home gateway unit (Home Gateway Unit) are the optical-fiber network termination, it all exists the possibility of registration abnormity in the use, register and authentication state and pass through to analyze, effectively the position of orientation problem generation; Especially, along with the spread of HGU, owing to the intercommunication that relates between many manufacturers, and the impact of each place network environment, the unusual phenomenon of devices communicating gets more and more.
And for some early stage dual chip scheme equipment (such as the TK scheme), the PON chip has certain independence mostly in equipment, mostly all independently finishes such as the MAC authentication mode, obtains the state that authenticates less than MAC as main control chip at all.And meanwhile, China Telecom has formulated the LOID registration, and also there is respectively the privately owned registration mode of oneself in corresponding all big enterprises, and this has just caused two results:
1) might adopt the authentication of different logon mode, all need to judge one by one for every kind of authentication mode, since confirm present logon mode;
2) owing to there is multiple logon mode, increased the probability that the registration conflict occurs between the ONU.
Since in the market the PON business machine mainly with LOID as logon mode, so, mostly only be registered as basis for estimation with LOID, register and authentication state, and then the position that occurs of orientation problem.But, except the PON equipment of unexpected other logon modes of LOID gradually in marketing, urgent need overcomes with the problem of multiple logon mode as basis for estimation, to confirm the adopting network equipment of the multiple logon mode communication abnormality position to occur, is convenient to the maintenance of PON equipment.
Summary of the invention
The problems referred to above that exist in the PON facility registration authentication state judgment mechanism for the multiple logon mode of existing employing, now provide a kind of by carrying out the judgement of PON device authentication state with multiple logon mode as basis for estimation, the position of communication abnormality occurs to confirm the network equipment.
The objective of the invention is to be achieved through the following technical solutions:
The method of a kind of judgment device authentication state of the present invention is applied to be provided with the optical line terminal of OAM module, and described OAM module is used for management by the optical network device that ONU is connected with described optical line terminal, wherein, comprising:
Obtain expansion OAM message from described OAM module, extracts the value of Opcode, Branch and Leaf in the described OAM of the expansion message;
According to the value of described Opcode and/or described Branch and Leaf, judge the kind of ONU authentication registration failure;
Wherein, described Opcode represents action type, and described Branch represents that this TLV is the example index of management object, and described Leaf represents the numbering of the example of concrete management object.
The method of above-mentioned judgment device authentication state, wherein, the kind of described ONU registration failure comprises that unregistered and/or registered unverified and/or authentication conflicts and/or OAM are unusual alternately.
The method of above-mentioned judgment device authentication state, wherein, when described Opcode is 0x05, and when log-on message was registration failure in this expansion OAM message, the kind of authentification failure was unregistered.
The method of above-mentioned judgment device authentication state, wherein, when described Opcode is 0x03, according to the Branch in this expansion OAM message and the value of Leaf, the kind of judging authentification failure belong to registered unverified, authentication conflicts or OAM unusual alternately.
The method of above-mentioned judgment device authentication state, wherein, when the kind of authentification failure was unregistered, its authentification failure former was because luminous power is not enough.
The method of above-mentioned judgment device authentication state, wherein, by checking that luminous power and/or optical module power supply are to determine the reason of luminous power deficiency.
The method of above-mentioned judgment device authentication state, wherein, the kind of authentification failure is registered when unverified, whether authentication has return information to judge the reason of authentification failure according to LOID.
The method of above-mentioned judgment device authentication state wherein, if described LOID authentication has return information, is judged the authentification failure reason according to this return information;
If described LOID authentication is without return information, then authentification failure is former because luminous power is in critical value.
The method of above-mentioned judgment device authentication state, wherein, if quick solution registration after registration is finished, and repeatedly register the reconciliation registration action, then the kind of authentification failure is authentication conflicts.
The method of above-mentioned judgment device authentication state, wherein, if optical line terminal repeatedly issues the configuration of repetition for a long time, then the kind of authentification failure is that OAM is unusual alternately.
In sum, the method of a kind of judgment device authentication state of the present invention, by the analysis to Opcode, Branch and Leaf information in the expansion OAM message, and then judge the kind of device authentication fails, find out accordingly the reason of authentification failure according to the kind of different authentication failure, and then can realize with multiple logon mode adopting the network equipment of multiple logon mode the communication abnormality position to occur as judging the authentification failure foundation with quick affirmation, in time equipment fault is safeguarded to PON.
Description of drawings
Fig. 1 is the structural representation that the FTTB mode is carried out PON in the prior art;
Fig. 2 is expansion OAM message structure schematic diagram in the embodiment of the invention;
Fig. 3 is the schematic flow sheet of the method for judgment device authentication state in the embodiment of the invention.
Embodiment
Below in conjunction with accompanying drawing the specific embodiment of the present invention is further described:
The method of a kind of judgment device authentication state of the present invention, be mainly used in and be provided with CTC OAM(Operation Administration and Maintenance on the local side (OLT), Operations, Administration and Maintenance) module, this OAM module is used for managing the equipment that connects with optical line terminal (Optical Line Terminal is called for short OLT).
Because optical node (Optical Network Unit is called for short ONU) is when success is passed through authentication at OLT, OLT can issue the initialized configuration of a cover at once, disposes the parameters of ONU, to guarantee the normal operation of ONU.
Fig. 2 is expansion OAM message structure schematic diagram in the embodiment of the invention; As shown in Figure 2, in the expansion OAM message structure of the configuration that present OLT issues, 1 part is that example index TLV(comprises Branch, Leaf, Variable Width and Value), 2 parts and 3 parts are the Variable Descriptor TLV for being made of Branch and Leaf all, and 4 parts comprise 2 parts and 3 parts, can have a plurality of Variable Descriptor TLV.
Owing to when the meaning that registration abnormity is judged just is unusually to occur, can come orientation problem by unusual judgement, so show at analysis result in the situation of authentification failure, can provide several with reference to reason.
A. unregistered, namely mpcp notes abnormalities; In general this situation all is because the luminous power deficiency causes, so detect luminous power and the just very easy decision problem place of optical module mains switch when finding this situation;
B. registered unverified; The reason of this problem is many, and most cases can by when registered unverified the appearance, judge whether first the answer of LOID authentication; Reply the reason that just can directly know the LOID authentification failure by the content of replying if having, if and without replying, then continue to check luminous power, because in test discovery, if luminous power is separated situation about registering after register flow path in the time of critical value, can occurring entering soon;
C. authentication conflicts; The judgement of this situation then is by inquiring solution registration very fast after registration is finished and repeatedly registering the phenomenon of conciliating registration action;
D. OAM is unusual alternately; Because the in most cases action that issues of OAM all is very fast, so if there is the configuration that repeatedly issues for a long time repetition, probably be that OAM problem occurred on alternately so just.
Certainly, more than some mainly is reference for orientation problem, in actual environment, similar problem occurring also has many, reason is also various, simultaneously above those features also not necessarily his inference cause, can only say that the possibility of this reason is higher.
Fig. 3 is the schematic flow sheet of the method for judgment device authentication state in the embodiment of the invention; As shown in Figure 3, obtain a plurality of expansion OAM messages, and from each OAM message, extract Opcode, the value of Branch and Leaf; Wherein, Opcode represents action type, and Branch represents that this TLV is the example index of management object, and Leaf represents the numbering of the example of concrete management object.
Because the equipment of a lot of manufacturers all can obtain the configuration information of some ONU after establishing (LLID issues successfully) with limited laibility, so can ignore the value that Opcode is 0x01, and Opcode is that 0x02 or 0x04 are for replying message, also can omit at this, be the part value of 0x03 or 0x05 so need only with reference to Opcode.
Opcode among the OAM is that this partial content of 0x05(is to be responsible for the LOID registration) time, be to succeed in registration or registration failure by inquiring about it in replying, can directly judge authentication result and be successfully or failure; At this moment, if be registration failure in replying, then can directly be judged to be the unregistered situation of above-mentioned a, can be by detecting luminous power and optical module mains switch to determine whether because of the not enough authentification failure that causes of luminous power; And if be to succeed in registration in replying, then directly confirm to succeed in registration.
When the Opcode among the OAM is 0x03, then to continue the information of Branch and leaf in this OAM message is judged, with the value of determining to issue, and filter some special operationals, such as ONU power supply control 0xC7 0x00A1, and then to judge the authentification failure situation be above-mentioned " b. is registered unverified ", " c. authentication conflicts " or situations such as " d. OAM are unusual alternately ", and according to the reason that causes authentification failure in the above-mentioned corresponding authentification failure situation, find fast the problem place of authentication registration failure, timely the PON network equipment is managed and safeguards.
Present embodiment is on the basis of the existing network environment of reference current device, considered the common practice of each manufacturer at authenticated connection, by analyzing the content of OAM message, judge whether authentication state is set up, utilize simultaneously the various information of collecting outside the OAM, comprehensively judge the state of authentication registration, and provide the unusual reference reason of authentication registration, although function is simple, can help quick positioning question, greatly improve solution of problem efficient.
In sum, the method of a kind of judgment device authentication state of the present invention, by the analysis to Opcode, Branch and Leaf information in the expansion OAM message, and then judge the kind of device authentication fails, find out accordingly the reason of authentification failure according to the kind of different authentication failure, and then can realize with multiple logon mode adopting the network equipment of multiple logon mode the communication abnormality position to occur as judging the authentification failure foundation with quick affirmation, in time equipment fault is safeguarded to PON.
By explanation and accompanying drawing, provided the exemplary embodiments of the ad hoc structure of embodiment, based on the present invention's spirit, also can do other conversion.Although foregoing invention has proposed existing preferred embodiment, yet these contents are not as limitation.
For a person skilled in the art, read above-mentioned explanation after, various changes and modifications undoubtedly will be apparent.Therefore, appending claims should be regarded whole variations and the correction of containing true intention of the present invention and scope as.Any and all scope of equal value and contents all should be thought still to belong in the intent of the present invention and the scope in claims scope.
Claims (10)
1. the method for a judgment device authentication state is applied to be provided with the optical line terminal of OAM module, and described OAM module is used for management by ONU and the optical network device that described optical line terminal is connected, and it is characterized in that, comprising:
Obtain expansion OAM message from described OAM module, extracts the value of Opcode, Branch and Leaf in the described OAM of the expansion message;
According to the value of described Opcode and/or described Branch and Leaf, judge the kind of ONU authentication registration failure;
Wherein, described Opcode represents action type, and described Branch represents that this TLV is the example index of management object, and described Leaf represents the numbering of the example of concrete management object.
2. the method for judgment device authentication state according to claim 1 is characterized in that, the kind of described ONU registration failure comprises that unregistered and/or registered unverified and/or authentication conflicts and/or OAM are unusual alternately.
3. the method for judgment device authentication state according to claim 2 is characterized in that, when described Opcode is 0x05, and when log-on message was registration failure in this expansion OAM message, the kind of authentification failure was unregistered.
4. the method for judgment device authentication state according to claim 2, it is characterized in that, when described Opcode is 0x03, according to the Branch in this expansion OAM message and the value of Leaf, the kind of judging authentification failure belong to registered unverified, authentication conflicts or OAM unusual alternately.
5. the method for the described judgment device authentication state of any one is characterized in that according to claim 2-4, and when the kind of authentification failure was unregistered, its authentification failure former was because luminous power is not enough.
6. the method for judgment device authentication state according to claim 5 is characterized in that, by checking that luminous power and/or optical module power supply are to determine the reason of luminous power deficiency.
7. the method for the described judgment device authentication state of any one is characterized in that according to claim 2-4, and the kind of authentification failure is registered when unverified, and whether authentication has return information to judge the reason of authentification failure according to LOID.
8. the method for judgment device authentication state according to claim 7 is characterized in that, if described LOID authentication has return information, judges the authentification failure reason according to this return information;
If described LOID authentication is without return information, then authentification failure is former because luminous power is in critical value.
9. the method for the described judgment device authentication state of any one is characterized in that according to claim 2-4, if quick solution registration after registration is finished, and repeatedly register the reconciliation registration action, then the kind of authentification failure is authentication conflicts.
10. the method for the described judgment device authentication state of any one is characterized in that according to claim 2-4, if optical line terminal repeatedly issues the configuration of repetition for a long time, then the kind of authentification failure is that OAM is unusual alternately.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201210568576.9A CN102970072B (en) | 2012-12-24 | 2012-12-24 | A kind of method judging device authentication state |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201210568576.9A CN102970072B (en) | 2012-12-24 | 2012-12-24 | A kind of method judging device authentication state |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN102970072A true CN102970072A (en) | 2013-03-13 |
| CN102970072B CN102970072B (en) | 2016-12-28 |
Family
ID=47799976
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201210568576.9A Expired - Fee Related CN102970072B (en) | 2012-12-24 | 2012-12-24 | A kind of method judging device authentication state |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN102970072B (en) |
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107148041A (en) * | 2017-06-20 | 2017-09-08 | 上海斐讯数据通信技术有限公司 | The detection method and radio reception device of radio reception device misoperation |
| CN110677748A (en) * | 2019-09-06 | 2020-01-10 | 四川天邑康和通信股份有限公司 | Safety risk management and control mechanism for GPON optical modem |
Citations (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1968089A (en) * | 2006-09-29 | 2007-05-23 | 华为技术有限公司 | Subscriber authentication method for passive optical network |
| CN101034938A (en) * | 2007-04-05 | 2007-09-12 | 中兴通讯股份有限公司 | Configuration method for remote management IP address of the ONU in the EPON network |
| JP2008028922A (en) * | 2006-07-25 | 2008-02-07 | Nippon Telegr & Teleph Corp <Ntt> | Authentication method in network system, authentication apparatus, and apparatus to be authenticated |
| CN101170468A (en) * | 2007-11-22 | 2008-04-30 | 中国电信股份有限公司 | Acquisition method and system for optical network unit capability information |
| CN101174898A (en) * | 2007-11-16 | 2008-05-07 | 中国电信股份有限公司 | Tele-management method and system for optical network unit |
| CN102026052A (en) * | 2011-01-04 | 2011-04-20 | 中兴通讯股份有限公司 | Fault diagnosis method and system |
| CN102571350A (en) * | 2011-12-30 | 2012-07-11 | 中兴通讯股份有限公司 | Authentication method and device for optical network unit |
-
2012
- 2012-12-24 CN CN201210568576.9A patent/CN102970072B/en not_active Expired - Fee Related
Patent Citations (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| JP2008028922A (en) * | 2006-07-25 | 2008-02-07 | Nippon Telegr & Teleph Corp <Ntt> | Authentication method in network system, authentication apparatus, and apparatus to be authenticated |
| CN1968089A (en) * | 2006-09-29 | 2007-05-23 | 华为技术有限公司 | Subscriber authentication method for passive optical network |
| CN101034938A (en) * | 2007-04-05 | 2007-09-12 | 中兴通讯股份有限公司 | Configuration method for remote management IP address of the ONU in the EPON network |
| CN101174898A (en) * | 2007-11-16 | 2008-05-07 | 中国电信股份有限公司 | Tele-management method and system for optical network unit |
| CN101170468A (en) * | 2007-11-22 | 2008-04-30 | 中国电信股份有限公司 | Acquisition method and system for optical network unit capability information |
| CN102026052A (en) * | 2011-01-04 | 2011-04-20 | 中兴通讯股份有限公司 | Fault diagnosis method and system |
| CN102571350A (en) * | 2011-12-30 | 2012-07-11 | 中兴通讯股份有限公司 | Authentication method and device for optical network unit |
Cited By (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107148041A (en) * | 2017-06-20 | 2017-09-08 | 上海斐讯数据通信技术有限公司 | The detection method and radio reception device of radio reception device misoperation |
| CN110677748A (en) * | 2019-09-06 | 2020-01-10 | 四川天邑康和通信股份有限公司 | Safety risk management and control mechanism for GPON optical modem |
| CN110677748B (en) * | 2019-09-06 | 2022-03-11 | 四川天邑康和通信股份有限公司 | Safety risk control method for GPON optical modem |
Also Published As
| Publication number | Publication date |
|---|---|
| CN102970072B (en) | 2016-12-28 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US8873969B2 (en) | Method for ONU registration in a passive optical network | |
| CN101675615B (en) | Gpon oam using ieee 802.1ag methodology | |
| CN101060370B (en) | A PON terminal management method and system | |
| CN102215124B (en) | Fault processing method, sink node and optical network protection system | |
| US9755749B2 (en) | ONU, communication system and communication method for ONU | |
| CN112567647B (en) | PON fault positioning method and device | |
| CN100417082C (en) | Method for carrying out terminal management for passive optical network based on Ethernet | |
| US20090049532A1 (en) | Method, device and system for user authentication on passive optical network | |
| CN110460371B (en) | Optical resource checking method and system | |
| CN109698758A (en) | A kind of network resource information check method and system | |
| CN101674139B (en) | Method, device and system for perceiving service provider from optical network device | |
| CN106464356B (en) | A kind of detection method of rogue's optical network unit, apparatus and system | |
| CN101998189A (en) | Method for managing optical access node and optical access node | |
| CN102571353A (en) | Method for verifying legitimacy of home gateway in passive optical network | |
| CN106992986A (en) | A kind of method and system of hybrid authentication | |
| CN102970072A (en) | Method for judging device authentication state | |
| CN102480472B (en) | Application program integration login method of enterprise inner network and verification server thereof | |
| Hehmann et al. | Remotely powered intelligent splitter monitor for fiber access networks | |
| CN103036715A (en) | Method and device of equipment management and corresponding network management system | |
| CN105871615B (en) | Method and system for displaying registration information | |
| US11095521B2 (en) | Method and system for identifying a communication port of a telecommunication network | |
| CN103152196A (en) | Method for dynamically adding optical line terminal (OLT) into Ethernet passive optical network (EPON) management system | |
| CN101378330A (en) | Method, equipment and system for implementing remote management of equipment | |
| US20130045013A1 (en) | Method for performing network functions, telecommunication's access network, central unit, network-sided network termination unit, and subscriber-sided network access unit | |
| CN109120334A (en) | Fiber position determines method and device, network element, storage medium and processor |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C14 | Grant of patent or utility model | ||
| GR01 | Patent grant | ||
| CF01 | Termination of patent right due to non-payment of annual fee | ||
| CF01 | Termination of patent right due to non-payment of annual fee |
Granted publication date: 20161228 Termination date: 20181224 |